Privacy Policy

Last updated: 28 July 2026

Her-Veloura (“Her-Veloura”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and share your personal data when you visit our website, create an account, place or return an order, contact us, subscribe to marketing communications or otherwise use our products and servwhich provides the e-commerce platform that enables us to offer our products and services.

Please read this Privacy Policy carefully.

1. Who is responsible for your personal data?

Her-Veloura is the data controller responsible for the personal data described in this Privacy Policy.

Contact details

Her-Veloura
Email: info@her-veloura.com

You can contact us at info@her-veloura.com if you have questions about this Privacy Policy, wish to exercise your privacy rights or want to make a complaint about how we process your personal data.

2. Personal data we collect

The personal data we collect depends on how you interact with our website and services.

Contact and identification information

We may collect:

• Your first and last name;
• Your email address;
• Your telephone number;
• Your billing address;
• Your delivery address; and
• Any other contact information you provide to us.

Order and transaction information

We may collect:

• Products you view, purchase, return or exchange;
• Products placed in your shopping basket;
• Your order number;
• Your order and purchase history;
• Your chosen payment method;
• Payment status and confirmation;
• Delivery and tracking information;
• Returns, refunds and exchanges; and
• Discounts or promotional codes used.

Payment information is generally processed directly by Shopify Payments or another payment service provider. We do not normally receive or store your complete payment card details.

Account information

When you create an account, we may collect:

• Your username;
• Your password in encrypted or otherwise protected form;
• Saved addresses;
• Your order history;
• Your preferences; and
• Other account settings.

You are responsible for keeping your account credentials secure. Please do not share your password or login details with anyone.

Communications with us

We collect information you provide when you contact us through:

• Email;
• Contact forms;
• Customer service requests;
• Product reviews;
• Surveys; and
• Social media.

This may include the content of your message and any attachments or other information you choose to provide.

Device and usage information

When you use our website, we may automatically collect information such as:

• Your IP address;
• Browser type and version;
• Device type;
• Operating system;
• Language settings;
• Time zone;
• Pages viewed;
• Links clicked;
• Products viewed;
• The date and time of your visit;
• The website or advertisement that referred you to us; and
• Information about how you navigate and use our website.

Marketing information

We may collect information about:

• Whether you have subscribed to marketing communications;
• Your email and advertising preferences;
• Whether you have opened or interacted with marketing messages; and
• Your interactions with our advertisements.

We do not intentionally collect special category data, such as information about your health, religion, ethnicity, political beliefs or sexual orientation.

3. How we collect personal data

We may collect personal data in the following ways.

Directly from you

For example, when you:

• Place an order;
• Create an account;
• Contact us;
• Submit a form;
• Subscribe to our newsletter;
• Write a review; or
• Request a return or refund.

Automatically

We may automatically collect technical and usage information when you access or use our website.

From service providers

We may receive personal data from companies that help us operate our business, including:

• Shopify;
• Payment service providers;
• Delivery and fulfilment companies;
• Fraud-prevention providers;
• Analytics providers;
• Marketing platforms; and
• Customer service providers.

From third parties

We may receive data from advertising partners, social media platforms and other third parties where permitted by law.

4. How and why we use your personal data

We only process personal data when we have a valid legal basis.

Processing and fulfilling your order

We use your personal data to:

• Process your order and payment;
• Confirm your order;
• Arrange delivery;
• Provide tracking information;
• Handle returns, exchanges and refunds;
• Contact you about your order; and
• Manage your customer account.

The legal basis for this processing is that it is necessary to perform our contract with you or to take steps at your request before entering into a contract.

You must provide certain information so that we can process and deliver your order. Without this information, we may be unable to complete your purchase.

Customer service and communications

We use your data to:

• Respond to questions;
• Handle complaints;
• Provide customer support;
• Resolve problems with orders;
• Communicate important service information; and
• Maintain our customer relationship.

We process this information where necessary to perform our contract with you or because we have a legitimate interest in providing effective customer service.

Legal and administrative obligations

We may use and retain personal data to:

• Maintain financial and accounting records;
• Comply with tax requirements;
• Comply with consumer protection laws;
• Respond to lawful requests;
• Establish, exercise or defend legal claims; and
• Comply with other legal obligations.

The legal basis for this processing is compliance with our legal obligations and, where appropriate, our legitimate interests.

Security and fraud prevention

We may use personal data to:

• Verify transactions;
• Protect customer accounts;
• Detect and prevent fraud;
• Investigate suspicious activity;
• Protect our website and systems;
• Enforce our terms and policies; and
• Protect the rights, safety and property of Her-Veloura, our customers and others.

The legal basis is our legitimate interest in operating a secure business and protecting our customers, as well as compliance with applicable legal obligations.

Website analysis and improvement

We may use personal data to:

• Understand how customers use our website;
• Identify technical problems;
• Improve our products and services;
• Improve website performance;
• Personalise the shopping experience; and
• Measure the effectiveness of our advertising.

Depending on the circumstances, we rely on your consent or our legitimate interests.

Marketing and advertising

With your consent, or where otherwise permitted by law, we may use your personal data to:

• Send promotional emails;
• Inform you about products, offers and promotions;
• Personalise marketing communications;
• Show advertisements on our website or third-party platforms; and
• Measure the effectiveness of marketing campaigns.

You can unsubscribe from marketing emails at any time by selecting the unsubscribe link in the email or by contacting us at info@her-veloura.com.

Unsubscribing from marketing communications will not prevent us from sending necessary service messages about your account, orders, payments, deliveries or returns.

Consent

Where we rely on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before your consent was withdrawn.

5. How we share personal data

We do not sell your personal data.

We may share personal data with third parties where necessary for the purposes described in this Privacy Policy.

Shopify

Our store is hosted by Shopify. Shopify processes personal data to provide and improve its e-commerce platform, checkout, hosting, security, analytics and related services.

Information entered on our website may be transmitted to Shopify and its service providers.

For certain Shopify services, Shopify may process personal data as an independent data controller. Shopify’s use of your personal data is subject to its own privacy policies.

Payment service providers

We share relevant information with payment providers to:

• Process payments;
• Confirm transactions;
• Prevent fraud;
• Process refunds; and
• Handle payment disputes.

Payment providers process your data in accordance with their own privacy policies.

Delivery and fulfilment providers

We may share your name, delivery address, contact information and order details with:

• Postal services;
• Couriers;
• Warehousing providers;
• Fulfilment partners; and
• Returns providers.

This information is shared only where necessary to fulfil and deliver your order or process a return.

Technology and service providers

We may share data with companies that provide:

• Website hosting;
• Cloud storage;
• IT support;
• Customer service systems;
• Email services;
• Analytics;
• Website security;
• Fraud prevention; and
• Business administration.

These providers may only use personal data as necessary to perform their services, subject to appropriate contractual and data-protection obligations.

Marketing and advertising partners

Where you have provided consent or where otherwise permitted by law, we may share relevant information with marketing and advertising partners.

These partners may process personal data in accordance with their own privacy policies.

Professional advisers

We may share personal data with accountants, auditors, insurers, lawyers and other professional advisers where necessary to operate our business, comply with legal obligations or protect our rights.

Government authorities and law enforcement

We may disclose personal data where required by law or where reasonably necessary to:

• Respond to a court order or lawful request;
• Cooperate with regulators or law enforcement;
• Investigate illegal activity;
• Protect our legal rights; or
• Protect the rights or safety of other people.

Business transactions

If Her-Veloura is involved in a merger, sale, restructuring, financing, insolvency or transfer of all or part of its business, personal data may be disclosed to relevant advisers, potential purchasers or other parties involved in that transaction.

6. International transfers

Her-Veloura is based in the Netherlands and serves customers in the United Kingdom.

Shopify and some of our other service providers may operate in, or transfer personal data to, countries outside the United Kingdom and the European Economic Area.

These countries may have data-protection laws that differ from those in your country.

Where required, we use appropriate safeguards for international transfers, such as:

• A valid adequacy decision or adequacy regulation;
• The European Commission’s Standard Contractual Clauses;
• The United Kingdom International Data Transfer Agreement;
• The United Kingdom Addendum to the Standard Contractual Clauses; or
• Other legally recognised transfer safeguards.

Where appropriate, we also assess the risks associated with international transfers and apply supplementary technical, organisational or contractual safeguards.

You may contact us for more information about the safeguards used for international transfers.

7. Automated processing and fraud detection

Shopify, payment providers and fraud-prevention providers may use automated tools to identify suspicious orders, payments or account activity.

These tools may consider information such as:

• Transaction details;
• IP address;
• Device information;
• Delivery and billing information;
• Order history; and
• Indicators of potentially fraudulent activity.

Where a decision based solely on automated processing produces legal or similarly significant effects, we will provide the information and safeguards required by applicable law.

This may include an opportunity to request human review, provide your point of view and challenge the decision.

8. How long we retain personal data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

The appropriate retention period depends on factors such as:

• The type and sensitivity of the information;
• The purposes for which it is processed;
• Whether you have an active account;
• Whether the information is needed to fulfil an order;
• Tax, accounting and other legal requirements;
• Fraud-prevention requirements;
• Possible disputes or legal claims; and
• Our contractual obligations.

Order, payment and invoice information may be retained for the period required by applicable tax and accounting laws.

Customer service correspondence may be retained for as long as necessary to resolve the relevant request and maintain appropriate business records.

When personal data is no longer required, we delete or anonymise it unless continued retention is required by law.

9. Security

We use reasonable technical and organisational measures designed to protect personal data against:

• Unauthorised access;
• Loss;
• Misuse;
• Alteration;
• Disclosure; and
• Destruction.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

Please avoid sending sensitive or confidential information through unsecured communication channels.

10. Your privacy rights

Depending on where you live and subject to applicable legal conditions and exceptions, you may have the following rights:

Right of access

You may request confirmation of whether we process your personal data and ask for a copy of the data we hold about you.

Right to rectification

You may ask us to correct personal data that is inaccurate or incomplete.

Right to erasure

You may ask us to delete your personal data in certain circumstances.

Right to restrict processing

You may ask us to restrict how we process your personal data in certain circumstances.

Right to object

You may object to processing based on our legitimate interests.

You may object to the use of your personal data for direct marketing at any time.

Right to data portability

You may ask to receive certain personal data in a structured, commonly used and machine-readable format or ask us to transfer it to another organisation where technically possible.

Right to withdraw consent

Where processing is based on consent, you may withdraw your consent at any time.

Rights relating to automated decisions

In certain circumstances, you may have rights relating to decisions made solely through automated processing that have legal or similarly significant effects.

Right to complain

You have the right to make a complaint to a data-protection authority.

If you are located in the United Kingdom, you may complain to the Information Commissioner’s Office.

If you are located in the European Economic Area, you may complain to the supervisory authority in the country where you live or work.

We encourage you to contact us first so that we can try to resolve your concern.

11. Exercising your rights

To exercise your privacy rights, contact us at:

info@her-veloura.com

Please clearly explain which right you wish to exercise and provide sufficient information for us to identify your records.

We may need to verify your identity before responding to your request. We will only request information that is reasonably necessary for verification.

You may appoint an authorised representative to submit a request on your behalf. We may require evidence that the representative has permission to act for you.

We will respond within the period required by applicable law.

You will not be discriminated against for exercising your privacy rights.

12. Children’s privacy

Our website and products are not intended for children.

We do not knowingly collect personal data from children under the minimum legal age applicable in their country.

If you are a parent or guardian and believe that a child has provided personal data to us, please contact us at info@her-veloura.com. We will take reasonable steps to investigate and, where appropriate, delete the information.

13. Third-party websites and services

Our website may contain links to websites, applications or services operated by third parties.

We are not responsible for the privacy, security or content of third-party websites or services.

Before providing personal data to a third party, you should review its privacy policy and terms.

The inclusion of a link does not necessarily mean that Her-Veloura endorses the relevant third party or its products or services.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• Our business activities;
• Our website or services;
• The service providers we use;
• Applicable laws and regulations; or
• Our data-protection practices.

The updated version will be published on our website with a revised “Last updated” date.

Where required by law, we will provide additional notice of significant changes.

15. Contact us

For questions about this Privacy Policy, our privacy practices or your personal data, contact:

Her-Veloura
Email: info@her-veloura.com

For the purposes of applicable data-protection law, Her-Veloura is the controller of your personal data.